Vulnerability advisory
GHSA-59pj-7mjh-4465
TYPO3 SQL Injection in low-level Query Generator
Also known as CVE-2019-19850
Severity
- CVSS 3.x
CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:L/A:N
Affected versions
typo3/cms Packagist
All typo3/cms advisories →| Affected | Fixed in |
|---|---|
8.0 to before 8.7.30 | 8.7.30Advisories → |
Also listed as affected (45) | |
9.0 to before 9.5.12 | 9.5.12Advisories → |
10.0 to before 10.2.2 | 10.2.2Advisories → |
| Affected | Fixed in |
|---|---|
8.0 to before 8.7.30 | 8.7.30Advisories → |
9.0 to before 9.5.12 | 9.5.12Advisories → |
10.0 to before 10.2.2 | 10.2.2Advisories → |
Description
An issue was discovered in TYPO3 before 8.7.30, 9.x before 9.5.12, and 10.x before 10.2.2. Because escaping of user-submitted content is mishandled, the class QueryGenerator is vulnerable to SQL injection. Exploitation requires having the system extension ext:lowlevel installed, and a valid backend user who has administrator privileges.